CVE-2024-7261

🗓️ 03 Sep 2024 02:10:25Reported by ZyxelType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 96 Views

Improper neutralization of special elements in Zyxel firmwar

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of Zyxel network devices’ microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system commands. This allows attackers to execute arbitrary commands.	16 Sep 202400:00	–	bdu_fstec
Circl	CVE-2024-7261	3 Sep 202405:45	–	circl
CNNVD	Zyxel多款产品操作系统命令注入漏洞	3 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-7261	3 Sep 202402:10	–	cvelist
EUVD	EUVD-2024-48208	3 Oct 202520:07	–	euvd
NCSC	Vulnerability fixed in Zyxel Access Points and Secure Routers	3 Sep 202409:45	–	ncsc
NVD	CVE-2024-7261	3 Sep 202403:15	–	nvd
Positive Technologies	PT-2024-6139 · Zyxel · Wax655E +4	2 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-7261	5 Feb 202511:35	–	redhatcve
The Hacker News	Zyxel Patches Critical OS Command Injection Flaw in Access Points and Routers	4 Sep 202411:27	–	thn

NVD

Node

AND

zyxel nwa110ax_firmwareRange<7.00(abtg.2)

zyxel nwa110axMatch-

Node

AND

zyxel nwa1123-ac_pro_firmwareRange<6.28(abhd.3)

zyxel nwa1123-ac_proMatch-

Node

AND

zyxel nwa1123acv3_firmwareRange<6.70(abvt.5)

zyxel nwa1123acv3Match-

Node

AND

zyxel nwa130be_firmwareRange<7.00(acil.2)

zyxel nwa130beMatch-

Node

AND

zyxel nwa210ax_firmwareRange<7.00(abtd.2)

zyxel nwa210axMatch-

Node

AND

zyxel nwa220ax-6e_firmwareRange<7.00(acco.2)

zyxel nwa220ax-6eMatch-

Node

AND

zyxel nwa50ax_firmwareRange<7.00(abyw.2)

zyxel nwa50axMatch-

Node

AND

zyxel nwa50ax_pro_firmwareRange<7.00(acge.2)

zyxel nwa50ax_proMatch-

Node

AND

zyxel nwa55axe_firmwareRange<7.00(abzl.2)

zyxel nwa55axeMatch-

Node

AND

zyxel nwa90ax_firmwareRange<7.00(accv.2)

zyxel nwa90axMatch-

Node

AND

zyxel nwa90ax_pro_firmwareRange<7.00(acgf.2)

zyxel nwa90ax_proMatch-

Node

AND

zyxel usg_lite_60ax_firmwareRange<v2.00(acip.3)

zyxel usg_lite_60axMatch-

Node

AND

zyxel wac500_firmwareRange<6.70(abvs.5)

zyxel wac500Match-

Node

AND

zyxel wac500h_firmwareRange<6.70(abwa.5)

zyxel wac500hMatch-

Node

AND

zyxel wac6103d-i_firmwareRange<6.28(aaxh.3)

zyxel wac6103d-iMatch-

Node

AND

zyxel wac6502d-s_firmwareRange<6.28(aase.3)

zyxel wac6502d-sMatch-

Node

AND

zyxel wac6503d-s_firmwareRange<6.28(aasf.3)

zyxel wac6503d-sMatch-

Node

AND

zyxel wac6552d-s_firmwareRange<6.28(abio.3)

zyxel wac6552d-sMatch-

Node

AND

zyxel wac6553d-e_firmwareRange<6.28(aasg.3)

zyxel wac6553d-eMatch-

Node

AND

zyxel wax300h_firmwareRange<7.00(achf.2)

zyxel wax300hMatch-

Node

AND

zyxel wax510d_firmwareRange<7.00(abtf.2)

zyxel wax510dMatch-

Node

AND

zyxel wax610d_firmwareRange<7.00(abte.2)

zyxel wax610dMatch-

Node

AND

zyxel wax620d-6e_firmwareRange<7.00(accn.2)

zyxel wax620d-6eMatch-

Node

AND

zyxel wax630s_firmwareRange<7.00(abzd.2)

zyxel wax630sMatch-

Node

AND

zyxel wax640s-6e_firmwareRange<7.00(accm.2)

zyxel wax640s-6eMatch-

Node

AND

zyxel wax650s_firmwareRange<7.00(abrm.2)

zyxel wax650sMatch-

Node

AND

zyxel wax655e_firmwareRange<7.00(acdo.2)

zyxel wax655eMatch-

Node

AND

zyxel wbe530_firmwareRange<7.00(acle.2)

zyxel wbe530Match-

Node

AND

zyxel wbe660s_firmwareRange<7.00(acgg.2)

zyxel wbe660sMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "NWA1123ACv3 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 6.70(ABVT.4)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WAC500 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 6.70(ABVS.4)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WAX655E firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 7.00(ACDO.1)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WBE530 firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "<= 7.00(ACLE.1)"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "USG LITE 60AX firmware",
    "vendor": "Zyxel",
    "versions": [
      {
        "status": "affected",
        "version": "V2.00(ACIP.2)"
      }
    ]
  }
]

Source	Link
zyxel	www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-os-command-injection-vulnerability-in-aps-and-security-router-devices-09-03-2024

17 Jun 2026 08:19Current

7.6High risk

Vulners AI Score7.6

CVSS 3.19.8

EPSS0.11408

SSVC

CWE-78